$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/f454b771-c258-3f7a-a665-b5cfe4d61240.roa File: f454b771-c258-3f7a-a665-b5cfe4d61240.roa (raw, json) Hash identifier: dSrA1zWHb9EWoTffylpe+RVeNCSoLydOTlySM9ngSCk= Subject key identifier: 14:D9:F9:53:B3:F2:42:2A:FD:1E:DB:14:BF:B7:AF:95:0D:FB:25:54 Certificate issuer: /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Certificate serial: 010D0C9F4328584EFE121215B8F5F0EB39E3D400 Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/f454b771-c258-3f7a-a665-b5cfe4d61240.roa Signing time: Sat 29 Aug 2026 01:00:12 +0000 ROA not before: Sat 29 Aug 2026 01:00:12 +0000 ROA not after: Fri 27 Nov 2026 02:00:12 +0000 asID: 13347 IP address blocks: 16.216.216.0/24 maxlen: 24 16.217.100.0/22 maxlen: 24 16.217.104.0/22 maxlen: 24 16.217.108.0/22 maxlen: 24 16.217.112.0/22 maxlen: 24 16.217.217.0/24 maxlen: 24 136.162.148.0/22 maxlen: 24 136.162.152.0/22 maxlen: 24 136.162.240.0/22 maxlen: 24 136.162.252.0/22 maxlen: 24 161.114.64.0/22 maxlen: 24 161.114.140.0/22 maxlen: 24 161.114.144.0/22 maxlen: 24 161.114.148.0/22 maxlen: 24 161.114.152.0/22 maxlen: 24 161.114.156.0/22 maxlen: 24 161.114.160.0/22 maxlen: 24 161.114.208.0/22 maxlen: 24 192.26.60.0/22 maxlen: 24 192.26.64.0/24 maxlen: 24 192.26.65.0/24 maxlen: 24 192.26.66.0/24 maxlen: 24 192.26.67.0/24 maxlen: 24 192.26.76.0/22 maxlen: 24 192.26.80.0/23 maxlen: 24 192.48.153.0/24 maxlen: 24 192.82.162.0/23 maxlen: 24 192.82.176.0/21 maxlen: 24 192.132.112.0/24 maxlen: 24 192.132.113.0/24 maxlen: 24 192.132.114.0/24 maxlen: 24 192.132.115.0/24 maxlen: 24 192.132.116.0/24 maxlen: 24 192.132.117.0/24 maxlen: 24 192.132.118.0/24 maxlen: 24 192.132.119.0/24 maxlen: 24 192.132.120.0/24 maxlen: 24 192.132.121.0/24 maxlen: 24 192.132.122.0/24 maxlen: 24 192.132.123.0/24 maxlen: 24 192.132.124.0/22 maxlen: 24 198.29.82.0/24 maxlen: 24 198.29.83.0/24 maxlen: 24 198.29.84.0/24 maxlen: 24 198.29.85.0/24 maxlen: 24 198.29.86.0/23 maxlen: 24 198.29.88.0/24 maxlen: 24 198.29.89.0/24 maxlen: 24 198.29.90.0/24 maxlen: 24 198.29.91.0/24 maxlen: 24 198.29.92.0/24 maxlen: 24 198.29.93.0/24 maxlen: 24 198.29.94.0/24 maxlen: 24 198.29.95.0/24 maxlen: 24 199.74.32.0/20 maxlen: 24 199.74.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fe:12:12:15:b8:f5:f0:eb:39:e3:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Validity Not Before: Aug 29 01:00:12 2026 GMT Not After : Nov 27 02:00:12 2026 GMT Subject: CN=0608d3a0-02a8-40fa-9ec6-4dda37d70f2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:d5:34:a1:ae:00:49:1a:8b:01:21:75:1c:95: 5b:34:7b:94:76:ab:e6:bd:eb:31:20:1b:be:e7:f4: e1:3e:62:c6:fa:84:a7:76:92:bf:af:bd:3c:44:92: 4b:74:5d:87:bd:1f:7a:c1:05:10:aa:ae:2d:f4:57: c7:20:01:c3:56:67:48:61:0e:e3:b7:30:2b:cc:29: 13:09:ab:b1:be:f5:ae:ee:aa:5b:9b:80:66:9c:9b: 75:ec:3a:ad:4f:18:49:b4:56:25:99:38:2a:44:1b: 3a:d9:9a:2b:78:55:74:92:98:33:d3:1c:2a:5f:53: 79:cc:5e:17:e9:3d:ad:c7:e6:cc:0c:75:0a:94:2a: 86:d4:90:da:c2:19:7c:19:d2:07:0b:e1:9f:d2:2c: 6e:14:87:03:74:04:60:e9:33:62:3e:e8:c6:4b:66: 8d:ee:54:01:cf:8e:79:96:0f:69:ee:85:fd:ec:d5: a3:12:1e:ab:78:b6:9b:1e:d9:9b:07:6e:88:cc:3e: e2:54:b8:b0:31:9a:96:05:2b:58:97:fa:af:14:13: b6:38:90:f5:05:3d:44:d8:52:f2:72:8a:c7:21:34: 6b:1f:4c:31:ea:7e:9d:9e:d7:71:0f:0e:a4:11:fd: 83:5d:c8:fe:5d:14:80:36:79:e6:33:90:07:57:82: 07:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:D9:F9:53:B3:F2:42:2A:FD:1E:DB:14:BF:B7:AF:95:0D:FB:25:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/f454b771-c258-3f7a-a665-b5cfe4d61240.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl X509v3 Authority Key Identifier: keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer sbgp-ipAddrBlock: critical IPv4: 16.216.216.0/24 16.217.100.0-16.217.115.255 16.217.217.0/24 136.162.148.0-136.162.155.255 136.162.240.0/22 136.162.252.0/22 161.114.64.0/22 161.114.140.0-161.114.163.255 161.114.208.0/22 192.26.60.0-192.26.67.255 192.26.76.0-192.26.81.255 192.48.153.0/24 192.82.162.0/23 192.82.176.0/21 192.132.112.0/20 198.29.82.0-198.29.95.255 199.74.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:7a:3f:e7:52:01:04:2a:c7:14:63:5b:84:61:71:1d:fb:b5: ed:2d:81:ce:9d:68:53:87:8f:85:65:09:d9:ec:ed:62:2f:a5: c7:59:e3:c6:00:62:d1:8b:70:5f:88:52:b5:cb:22:a4:4a:08: ad:cd:ce:fe:08:4f:13:35:50:77:88:d0:75:10:32:4e:07:16: 10:72:09:91:7c:c6:73:ca:5d:e1:81:6a:ca:e9:a0:87:48:4a: 83:2a:6c:14:77:c3:8d:45:4d:51:52:01:7b:cd:fb:2b:e0:f4: 02:45:c4:14:19:32:a0:b0:eb:9f:6f:69:d0:e8:5f:de:58:e6: 07:5a:22:b3:bf:75:52:b7:2c:86:a3:5b:3c:58:57:25:46:08: 17:01:e7:13:9d:30:a9:16:83:93:9f:d1:0a:3d:6b:8c:8f:52: 4f:73:80:cc:1a:5b:63:5d:21:b0:b2:09:0d:22:58:b4:af:f8: 76:3d:df:e6:26:e5:14:b9:2f:98:02:9b:f9:4e:41:b0:5b:f2: 2e:9e:0c:95:c2:9d:a8:72:00:a2:e8:23:80:29:6c:96:9d:43: 4a:2d:e0:90:24:26:b9:00:c3:ff:e6:9b:04:f5:f0:2b:cd:85: c9:14:12:d9:f6:d9:f1:39:69:2b:b1:cc:bc:09:62:92:37:68: a1:25:05:88 -----BEGIN CERTIFICATE----- MIIG2DCCBcCgAwIBAgIUAQ0Mn0MoWE7+EhIVuPXw6znj1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFiYzM0YmEtNWFiNC00ZjFhLTk2NWUtM2Q2ZWMwNGNk YmZhMB4XDTI2MDgyOTAxMDAxMloXDTI2MTEyNzAyMDAxMlowLzEtMCsGA1UEAxMk MDYwOGQzYTAtMDJhOC00MGZhLTllYzYtNGRkYTM3ZDcwZjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktU0oa4ASRqLASF1HJVbNHuUdqvmvesxIBu+ 5/ThPmLG+oSndpK/r708RJJLdF2HvR96wQUQqq4t9FfHIAHDVmdIYQ7jtzArzCkT CauxvvWu7qpbm4BmnJt17DqtTxhJtFYlmTgqRBs62ZoreFV0kpgz0xwqX1N5zF4X 6T2tx+bMDHUKlCqG1JDawhl8GdIHC+Gf0ixuFIcDdARg6TNiPujGS2aN7lQBz455 lg9p7oX97NWjEh6reLabHtmbB26IzD7iVLiwMZqWBStYl/qvFBO2OJD1BT1E2FLy corHITRrH0wx6n6dntdxDw6kEf2DXcj+XRSANnnmM5AHV4IHbwIDAQABo4ID6jCC A+YwHQYDVR0OBBYEFBTZ+VOz8kIq/R7bFL+3r5UN+yVUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YWJj MzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZlYzA0Y2RiZmEvZjQ1NGI3NzEtYzI1OC0z ZjdhLWE2NjUtYjVjZmU0ZDYxMjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWFiYzM0YmEtNWFiNC00ZjFhLTk2 NWUtM2Q2ZWMwNGNkYmZhLzVhYmMzNGJhLTVhYjQtNGYxYS05NjVlLTNkNmVjMDRj ZGJmYS5jcmwwHwYDVR0jBBgwFoAUqEN60KPgFcyfI1WW88UB8LZwZH0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YWJjMzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZl YzA0Y2RiZmEuY2VyMIGzBggrBgEFBQcBBwEB/wSBozCBoDCBnQQCAAEwgZYDBAAQ 2NgwDAMEAhDZZAMEAhDZcAMEABDZ2TAMAwQCiKKUAwQCiKKYAwQCiKLwAwQCiKL8 AwQCoXJAMAwDBAKhcowDBAKhcqADBAKhctAwDAMEAsAaPAMEAsAaQDAMAwQCwBpM AwQBwBpQAwQAwDCZAwQBwFKiAwQDwFKwAwQEwIRwMAwDBAHGHVIDBAXGHUADBAXH SiAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAXno/51IBBCrHFGNbhGFxHfu17S2Bzp1oU4ePhWUJ2eztYi+l x1njxgBi0YtwX4hStcsipEoIrc3O/ghPEzVQd4jQdRAyTgcWEHIJkXzGc8pd4YFq yumgh0hKgypsFHfDjUVNUVIBe837K+D0AkXEFBkyoLDrn29p0Ohf3ljmB1ois791 UrcshqNbPFhXJUYIFwHnE50wqRaDk5/RCj1rjI9ST3OAzBpbY10hsLIJDSJYtK/4 dj3f5iblFLkvmAKb+U5BsFvyLp4MlcKdqHIAougjgClslp1DSi3gkCQmuQDD/+ab BPXwK82FyRQS2fbZ8TlpK7HMvAlikjdooSUFiA== -----END CERTIFICATE-----Generated at Sat Sep 5 04:56:06 2026 by rpki-client